Legal

Privacy Policy

Effective Date: April 23, 2026

DemoScan respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

What We Collect

Account information

When you sign up for DemoScan, we collect your email address and a password. If you provide your name or company name during signup, we collect that too.

Billing information

Payments are processed by Paddle, our payment provider. We do not store your credit card details on our servers. Paddle provides us with limited information — customer ID, subscription status, and billing country.

Project data

When you upload plans to DemoScan, we store those files and the takeoff results we generate. This includes:

  • The PDF plans you upload
  • Rasterized page images generated during processing
  • Line items extracted by our AI analysis
  • Exports you generate (Excel files, etc.)
  • Project names, client names, and addresses you enter

Usage data

We track basic usage — when you log in, how many takeoffs you create, whether our system encountered errors processing your files. We do not track your behavior for advertising purposes or build profiles of you.

How We Store It

  • Account and project data is stored in a PostgreSQL database hosted on Render, encrypted at rest.
  • Uploaded plans and generated exports are stored in Cloudflare R2, encrypted at rest.
  • All connections to DemoScan use HTTPS (TLS 1.2 or higher).

Third Parties We Share Data With

We use a small number of services to operate DemoScan. We share only the data each service needs to function.

Anthropic — we send rasterized pages of your uploaded plans to Anthropic's Claude API for AI analysis. Per Anthropic's API terms, this data is not used to train their models. Anthropic retains requests for a maximum of 30 days for abuse monitoring, then deletes them.
Paddle — our payment processor. Paddle handles billing, taxes, and subscription management. We share your email and payment intent with Paddle; they manage your payment details.
Render — our hosting provider. All DemoScan data is stored in Render's infrastructure.
Cloudflare — DNS, CDN, and file storage (R2). Your uploaded files pass through Cloudflare infrastructure.
Sentry — error monitoring. If DemoScan encounters a bug, basic error information may be sent to Sentry. This does not include your uploaded plan content.

We do not sell your data. We do not share your data with advertisers. We do not share your data with any party except the services above.

Your Rights

You can:

  • Access all data we have about you by logging in to your account
  • Delete any project, takeoff, or export at any time
  • Delete your entire account, which permanently removes your data within 24 hours
  • Configure retention policies — set your uploads to auto-delete after a time period you choose (30, 60, 90 days, or never)
  • Export your takeoffs in Excel format at any time

Deletion is permanent. There is no trash folder, no undelete. When you cancel your subscription, your data remains in read-only mode for 60 days so you can export anything you need. After 60 days of inactivity post-cancellation, your data is permanently deleted.

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know what personal information we collect, use, and disclose
  • Right to delete personal information we have collected
  • Right to correct inaccurate personal information
  • Right to opt out of the sale or sharing of personal information (we do not sell or share personal information)
  • Right to limit use of sensitive personal information (we do not use sensitive personal information beyond what's necessary to provide the service)
  • Right to non-discrimination — we will not treat you differently for exercising these rights

To exercise these rights, email [email protected].

Changes to This Policy

If we make material changes to this Privacy Policy, we will notify you by email before the changes take effect. The "Effective Date" at the top reflects the most recent version.

Contact

Questions about this Privacy Policy or your data? Email [email protected].

Operator: DemoScan is operated by [OPERATOR NAME], based in California.

Mailing address: [MAILING ADDRESS]